UNIX admin wrote:
>> Sorry I don't have time to look at this for longer
>> right now, but IIRC
>> in ntp4 by default {broad,multi}casts are not trusted
>
> Does this also apply to NTP V3?
No, the xntpd that comes with Solaris has authentication off by default.
>
>> (any idiot on
>> the net could start broadcasting anything) so you
>> need to either
>> 1. set up keys that are used to broadcast at the
>> server end and
>> trusted at the client end
>> or
>> 2. use "disable auth" to trust anything that is
>> broadcast.
>
> True, however, if I understand correctly, broadcasts and multicasts are
> normally blocked per default by any networking equipment, on edge gateways
> and routers, which would make it a moot point.
>
> Nevertheless, your suggestion is worth a shot.
I think that this is likely the problem. Either the routers do not
forward the multicast packets, or the packets have a small TTL. You
can easily check this by running snoop on the client and looking for
packets. "snoop 224.0.0.1 port 123" should do it.
--
blu
There are two rules in life:
Rule 1- Don't tell people everything you know
----------------------------------------------------------------------
Brian Utterback - Solaris RPE, Sun Microsystems, Inc.
Ph:877-259-7345, Em:brian.utterback-at-ess-you-enn-dot-kom
